Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.mft
File:                     2F01BE16D3A51E20A05820B976FF259FD4D960FE.mft (raw, json)
Hash identifier:          o0IlwfG1Q7+rTRtjrvcS2sY/7Xt+HnS7YSj45yEl80g=
Subject key identifier:   07:09:0A:C7:1D:3E:D0:DB:C8:F7:2C:1A:A6:20:A5:CC:EB:85:02:D3
Authority key identifier: 2F:01:BE:16:D3:A5:1E:20:A0:58:20:B9:76:FF:25:9F:D4:D9:60:FE
Certificate issuer:       /CN=2F01BE16D3A51E20A05820B976FF259FD4D960FE
Certificate serial:       2ABBECCBA6B591F0AAED89F0DAC6951C40951753
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.mft
Manifest number:          0144
Signing time:             Sun 14 Apr 2024 17:10:02 +0000
Manifest this update:     Sun 14 Apr 2024 17:05:02 +0000
Manifest next update:     Mon 15 Apr 2024 21:01:02 +0000
Files and hashes:         1: 34352e3138372e36382e302f32342d3234203d3e20323639343631.roa (hash: Ff6Kolx/0OdLaKR4WIsM/Zw/DanoTrWkLICEuIpyick=)
                          2: 323830343a363466633a343030303a3a2f33342d3334203d3e20323639343631.roa (hash: FAwp34ZhaTRqxO8MYXebRF7jJCZLe64WmutLRfvrcMg=)
                          3: 34352e3138372e37312e302f32342d3234203d3e20323639343631.roa (hash: JBMHnsBiEa7NnWFoJWLfbUki9V+nfJIgVU55FF8jHeE=)
                          4: 323830343a363466633a3a2f33342d3334203d3e20323639343631.roa (hash: MWn2X93PAgVbyiRL5AKH8BeL9ys3//Wh1MVLAyUUJbM=)
                          5: 2F01BE16D3A51E20A05820B976FF259FD4D960FE.crl (hash: TFY/jjIxbg8RCVjHjA4onurqNAv6d/tmAxizX5JSI5A=)
                          6: 323830343a363466633a3a2f33322d3332203d3e20323639343631.roa (hash: H5uxRDWD0/dSaZzSHTPy6IC5zDGhml+mw4je92ckJpE=)
                          7: 34352e3138372e36392e302f32342d3234203d3e20323639343631.roa (hash: cvC62PwduPDDD3SoXizEDz++9r3nI9aPmVr2WpyEtyU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:bb:ec:cb:a6:b5:91:f0:aa:ed:89:f0:da:c6:95:1c:40:95:17:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F01BE16D3A51E20A05820B976FF259FD4D960FE
        Validity
            Not Before: Apr 14 17:05:02 2024 GMT
            Not After : Apr 15 21:01:02 2024 GMT
        Subject: CN=07090AC71D3ED0DBC8F72C1AA620A5CCEB8502D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4c:98:35:18:28:42:06:03:36:9b:dd:97:43:
                    35:bb:8c:ab:ca:c1:ca:2d:b6:47:65:ea:6a:43:fe:
                    73:ed:7c:f7:2a:10:00:b4:cb:b4:6e:aa:21:69:f6:
                    d4:15:c8:87:dc:5e:07:cc:08:24:33:0b:f2:cf:99:
                    7e:49:f6:92:e8:2f:b2:43:36:7f:5f:a3:83:a1:f0:
                    c2:cd:68:f0:31:2a:d7:15:74:34:e3:ec:13:1a:d0:
                    5d:7a:42:be:34:b0:57:4d:80:41:41:66:34:32:c6:
                    f1:8d:d4:9b:f3:8d:b3:7d:24:aa:c2:c5:3e:7d:7d:
                    30:14:76:4f:4e:9b:83:0a:ab:79:69:58:b4:16:93:
                    50:f4:83:12:f7:5f:ce:0d:33:f6:99:43:2c:aa:52:
                    cf:d0:ed:42:50:ab:79:3a:3f:3b:03:a5:a1:e4:aa:
                    7a:02:21:d3:5a:3c:a9:85:3f:26:71:41:f0:3f:67:
                    4f:12:e6:7a:d2:71:08:9e:14:ea:8b:71:ed:97:ab:
                    4d:e5:27:c2:6d:5d:12:b1:28:f7:a7:96:b7:65:b2:
                    33:4c:a6:d1:e3:46:8e:34:93:99:29:6e:90:30:99:
                    e7:a1:08:0c:dc:e9:5c:6f:77:f2:e5:33:3d:d6:7b:
                    c0:de:a2:58:0a:2a:3a:e9:0e:f5:a2:04:70:05:d0:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:09:0A:C7:1D:3E:D0:DB:C8:F7:2C:1A:A6:20:A5:CC:EB:85:02:D3
            X509v3 Authority Key Identifier:
                keyid:2F:01:BE:16:D3:A5:1E:20:A0:58:20:B9:76:FF:25:9F:D4:D9:60:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8KS6JPTQchwPwmMcJpzVqKVG3AZ1mgWgnUbPB9XyaXFL/0/2F01BE16D3A51E20A05820B976FF259FD4D960FE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:6c:97:72:17:16:01:e4:fa:5d:be:dd:0d:e4:80:60:97:83:
         54:c6:fd:30:ed:53:e0:bd:fd:be:77:1f:65:1a:ff:1e:9e:5b:
         cf:27:2b:b6:74:30:14:76:1e:44:7f:2e:34:6a:7a:b4:12:8c:
         31:39:34:ed:2e:55:81:57:b4:5f:3a:44:5a:a6:1a:83:2a:36:
         0d:a1:af:9c:ab:97:5b:5e:4d:b5:62:66:4a:e9:45:8e:c8:1e:
         50:46:4f:62:2c:fc:15:bf:b0:3e:9b:6b:9f:95:a6:fd:83:c9:
         7c:46:cd:04:12:13:33:a1:9e:94:15:6d:b2:6e:d0:1a:7f:0e:
         fc:ac:73:00:62:60:d4:f2:2e:4a:97:e1:9f:1b:bd:20:3d:6d:
         55:4a:df:02:71:d6:9f:4d:7f:32:df:ed:67:a8:1f:86:bc:c8:
         61:4d:52:d2:c0:f6:c8:58:66:44:19:f4:8f:81:2a:f9:9a:4e:
         a2:e6:15:4a:dd:28:f1:02:78:68:e5:a9:2c:f4:a1:3b:ac:fb:
         8f:d0:ad:09:1d:b6:5a:db:95:62:ab:60:25:a0:1e:c3:9e:9e:
         44:b9:8e:14:b0:7a:68:46:1a:22:8d:ef:15:56:95:cb:1d:58:
         62:b5:a5:44:0a:1e:e5:cd:0c:68:81:29:99:11:5b:f4:d1:eb:
         e0:c8:ea:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org